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CLAIMS 

What is claimed is: 

1 . A method comprising: 

establishing authentication information, said authentication information 
including time information associated with authenticating logic; 
with first logic, establishing credential information; and 
outputting an authentication request comprising said authentication 
information and said credential information, said authentication request being 
cryptographically modified. 

2. The method as recited in Claim 1, wherein said first logic is 
configured to output said authentication request. 

3. The method as recited in Claim 1, wherein second logic this is 
operatively coupled to said first logic is configured to output said authentication 
request. 

4. The method as recited in Claim 2, further comprising: 

with second logic that is operatively coupled to said first logic, receiving 
said authentication request and outputting a selectively modified authentication 
request. 
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5. The method as recited in Claim 1, further comprising: 

with authenticating logic that is operatively configured to receive said 
authentication request, at least validating said authentication information, and 
authenticating said credential information. 

6. The method as recited in Claim 5, further comprising: 

with said authenticating logic, outputting an authentication response 
comprising authentication approval information and corresponding cryptography 
information. 

7. The method as recited in Claim 6, further comprising: 

with said first logic, accessing at least a portion of said authentication 
response to retrieve said corresponding cryptography information and outputting 
said retrieved cryptography information. 

8. The method as recited in Claim 7, further comprising: 

with second logic that is operatively coupled to said first logic and said 
authentication logic, accessing at least a portion of said authentication response 
and using said retrieved cryptography information retrieve said authentication 
approval information. 

9. The method as recited in Claim 6, further comprising: 

with said second logic, accessing at least a portion of said authentication 
response to retrieve said corresponding cryptography information. 
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10. The method as recited in Claim 9, further comprising: 

with said second logic, accessing at least a portion of said authentication 
response and using said retrieved cryptography information retrieve said 
authentication approval information. 

11. The method as recited in Claim 6, wherein said authentication 
request is cryptographically modified by encryption using a private key. 

12. The method as recited in Claim 11, wherein said private key is 
associated with said first logic. 

13. The method as recited in Claim 11, wherein said private key is 
associated with said second logic. 

14. The method as recited in Claim 1 1 , further comprising: 

with said authenticating logic, retrieving said authentication information 
and said credential information from said authentication request using a public key 
pair-wise associated with said private key. 

15. The method as recited in Claim 14, further comprising: 
with said authenticating logic: 

establishing a temporary key; 

encrypting said temporary key using said public key to form said 
corresponding cryptography information; and 
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encrypting said authentication approval information using said temporary 

key. 

16. The method as recited in Claim 15, further comprising: 

with said second logic, providing said encrypted temporary key to said first 
logic; and 

with said first logic, retrieving said temporary key from said encrypted 
temporary key using said private key. 

17. The method as recited in Claim 16, further comprising: 

with said first logic, providing said retrieved temporary key to said second 
logic; and 

with said second logic, retrieving said authentication approval information 
using said retrieved temporary key. 

18. The method as recited in Claim 15, wherein said temporary key 
includes a symmetric key. 

19. The method as recited in Claim 8, wherein said first logic is 
substantially provided in a first device that includes a credential gathering 
mechanism configurable to establish said credential information, said second logic 
is provided at least partially in a second device, and said authenticating logic is 
provided at least partially in a third device. 
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20. The method as recited in Claim 19, wherein said credential gathering 
mechanism is configurable to establish biometric information. 

21. The method as recited in Claim 19, wherein said second device 
includes at least one computer operatively configured as a client device, and said 
third device includes a computer operatively configured as a server device. 

22. The method as recited in Claim 19, further comprising: 
generating said authentication information using at least one logic selected 

from said second logic and said authenticating logic. 

23. The method as recited in Claim 19, wherein said second logic 
modifies said authentication request by including certificate information in a 
modified authentication request. 

24. The method as recited in Claim 23, wherein said authenticating logic 
is configured to validate said authentication request based at least in part on said 
certificate information. 

25. The method as recited in Claim 5, wherein said authenticating logic 
is configured to validate said authentication information based on at least nonce 
data and timestamp data within said authentication information. 
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26. The method as recited in Claim 5, wherein said authenticating logic 
is configured to authenticate said credential information by logically comparing 
said credential information with stored credential information. 

27. The method as recited in Claim 8, wherein said authentication 
approval information includes an access token for use by said second device. 

28. The method as recited in Claim 1, wherein said authentication 
information includes nonce data and said time information includes timestamp 
data. 

29. The method as recited in Claim 1, wherein said authentication 
request includes at least one type of data selected from a group of data comprising 
identifier data, nonce data, signature data, timestamp data, and credential data. 

30. A computer readable medium having computer implementable 
instructions for causing one or more processing units to perform acts comprising: 

establishing authentication information, said authentication information 
including time information associated with authenticating logic; 

outputting an authentication request comprising said authentication 
information and credential information, said authentication request being 
cryptographically modified. 

3 1 . The computer readable medium as recited in Claim 30, wherein first 

* 

logic is configured to output said authentication request. 
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32. The computer readable medium as recited in Claim 31, wherein 
second logic this is operatively coupled to said first logic is configured to output 
said authentication request and said first logic is configured to provide said 
credential information. 

33. The computer readable medium as recited in Claim 31, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with second logic that is operatively coupled to said first logic, receiving 
said authentication request and outputting a selectively modified authentication 
request. 

34. The computer readable medium as recited in Claim 30, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with authenticating logic that is operatively configured to receive said 
authentication request, at least validating said authentication information, and 
authenticating said credential information. 

35. The computer readable medium as recited in Claim 34, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 
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with said authenticating logic, outputting an authentication response 
comprising authentication approval information and corresponding cryptography 
information. 

36. The computer readable medium as recited in Claim 35, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with said first logic, accessing at least a portion of said authentication 
response to retrieve said corresponding cryptography information and outputting 
said retrieved cryptography information. 

37. The computer readable medium as recited in Claim 36, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with second logic that is operatively coupled to said first logic and said 
authentication logic, accessing at least a portion of said authentication response 
and using said retrieved cryptography information retrieve said authentication 
approval information. 

38. The computer readable medium as recited in Claim 35, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with said second logic, accessing at least a portion of said authentication 
response to retrieve said corresponding cryptography information. 
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39. The computer readable medium as recited in Claim 38, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with said second logic, accessing at least a portion of said authentication 
response and using said retrieved cryptography information retrieve said 
authentication approval information. 

40. The computer readable medium as recited in Claim 35, wherein said 
authentication request is cryptographically modified by encryption using a private 
key. 

41. The computer readable medium as recited in Claim 40, wherein said 
private key is associated with said first logic. 

42. The computer readable medium as recited in Claim 40, wherein said 
private key is associated with said second logic. 

43. The computer readable medium as recited in Claim 40, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with said authenticating logic, retrieving said authentication information 
and said credential information from said authentication request using a public key 
pair-wise associated with said private key. 
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44. The computer readable medium as recited in Claim 43, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with said authenticating logic: 
establishing a temporary key; 

encrypting said temporary key using said public key to form said 
corresponding cryptography information; and 

encrypting said authentication approval information using said temporary 

key. 

45. The computer readable medium as recited in Claim 44, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with said second logic, providing said encrypted temporary key to said first 
logic; and 

with said first logic, retrieving said temporary key from said encrypted 
temporary key using said private key. 

46. The computer readable medium as recited in Claim 45, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

with said first logic, providing said retrieved temporary key to said second 
logic; and 

with said second logic, retrieving said authentication approval information 
using said retrieved temporary key. 
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47. The computer readable medium as recited in Claim 44, wherein said 
temporary key includes a symmetric key. 

48. The computer readable medium as recited in Claim 37, wherein said 
first logic is substantially provided in a first device that includes a credential 
gathering mechanism configurable to establish said credential information, said 
second logic is provided at least partially in a second device, and said 
authenticating logic is provided at least partially in a third device. 

49. The computer readable medium as recited in Claim 48, wherein said 
credential gathering mechanism is configurable to establish biometric information. 

50. The computer readable medium as recited in Claim 48, wherein said 
second device includes at least one computer operatively configured as a client 
device, and said third device includes a computer operatively configured as a 
server device. 

51. The computer readable medium as recited in Claim 48, having 
computer implementable instructions for causing one or more processing units to 
perform further acts comprising at least one of the following acts: 

generating said authentication information using at least one logic selected 
from said second logic and said authenticating logic. 
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52. The computer readable medium as recited in Claim 48, wherein said 
second logic modifies said authentication request by including certificate 
information in a modified authentication request. 

53. The computer readable medium as recited in Claim 52, wherein said 
authenticating logic is configured to validate said authentication request based at 
least in part on said certificate information. 

54. The computer readable medium as recited in Claim 34, wherein said 
authenticating logic is configured to validate said authentication information based 
on at least nonce data and timestamp data within said authentication information. 

55. The computer readable medium as recited in Claim 34, wherein said 
authenticating logic is configured to authenticate said credential information by 
logically comparing said credential information with stored credential information. 

56. The computer readable medium as recited in Claim 37, wherein said 
authentication approval information includes an access token for use by said 
second device. 

57. The computer readable medium as recited in Claim 30, wherein said 
authentication information includes nonce data and said time information includes 
timestamp data. 
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58. The computer readable medium as recited in Claim 30, wherein said 
authentication request includes at least one type of data selected from a group of 
data comprising identifier data, nonce data, signature data, timestamp data, and 
credential data. 

59. A system comprising: 

an authentication device having authentication logic; 
a first device having first logic; 

a second having second logic that is operatively coupled to said 
authentication logic and said first logic; and 
wherein: 

at least one of said authenticating logic and said second logic is configured 
to provide authentication information to said first logic, said authentication 
information including time information associated with said authenticating logic; 
said first logic is configured to establish credential information, 
at least one logic selected from said first logic and second logic is 
configured to output an authentication request comprising said authentication 
information and said credential information, said authentication request being 
cryptographically modified; 

said second logic is configured to output said authentication request; and 
said authenticating logic is configured to receive said authentication 
request, and at least validate said authentication information, and authenticate said 
credential information. 
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60. The system as recited in Claim 59, wherein: 

said authenticating logic is further configured to output an authentication 
response comprising authentication approval information and corresponding 
cryptography information. 

61. The system as recited in Claim 60, wherein said authentication 
approval information includes an access token for use by said second device. 

62. The system as recited in Claim 60, wherein: 

said first logic is further configured to access at least a portion of said 
authentication response to retrieve said corresponding cryptography information 
and output said retrieved cryptography information; and 

said second logic is further configured to access at least a portion of said 
authentication response and use said retrieved cryptography information output by 
said first logic to retrieve said authentication approval information. 

63. The system as recited in Claim 62, wherein; 

said first logic is further configured to cryptographically modify said 
authentication request by encryption using a private key; and 

said authenticating logic is further configured to retrieve said authentication 
information and said credential information from said authentication request using 
a public key pair-wise associated with said private key. 
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64. The system as recited in Claim 63, wherein: 

said authenticating logic is further configured to establish a temporary key, 
encrypt said temporary key using said public key to form said corresponding 
cryptography information, and encrypt said authentication approval information 
using said temporary key; 

said second logic is further configured to provide said encrypted temporary 
key to said first logic; 

said first logic is further configured to retrieve said temporary key from 
said encrypted temporary key using said private key, and provide said retrieved 
temporary key to said second logic; and 

said second logic is further configured to retrieve said authentication 
approval information using said retrieved temporary key. 

65 The system as recited in Claim 60, wherein: 

said second logic is further configured to access at least a portion of said 
authentication response to retrieve said corresponding cryptography information 
and use said retrieved cryptography information to retrieve said authentication 
approval information. 
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66. An apparatus comprising: 

a credential gathering mechanism configurable to establish credential 
information; 

first logic operatively coupled to said credential gathering mechanism and 
configured to access authentication information, said authentication information 
including time information associated with externally operating authenticating 
logic, and output an authentication request comprising said authentication 
information and said credential information, said authentication request being 
cryptographically modified. 

67. The apparatus as recited in Claim 66, wherein said credential 
information includes biometric credential information. 

68. An apparatus comprising: 

means for identifying authentication information that includes time 
information associated with authenticating logic; 

means for establishing credential information; 

means for outputting an authentication request comprising said 
authentication information and said credential information, said authentication 
request being cryptographically modified; 

means for receiving said authentication request; 

means for validating said authentication request; 

means for validating said authentication information; and 

means for authenticating said credential information. 
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